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AMENDMENTS TO THE CLAIMS 

This listing of claims replaces all prior versions and listings of claims in the application: 

LISTING OF CLAIMS : 
1-6. Canceled 

7. (Previously Presented) A data protection apparatus for protecting data in a storage 
volume in a computer system, with said computer system comprising said storage volume 
assigned for storing data, a replicated volume assigned for storing data duplicated from said 
storage volume, and a storage control unit for controlling data transfer from said storage 
volume to said replicated volume, wherein said data protection apparatus comprises: 

an event detection unit for detecting an event occurrence; and 

a replication stopping unit for instructing said storage control unit to stop data transfer 
from said storage volume to said replicated volume, when said event detection unit detects an 
event; 

said computer system further comprising a computer for reading and writing data 
from and to said storage volume; 

an illegal intrusion detection unit for detecting an illegal intrusion into said computer; 

wherein said event detection unit receives a detection of the illegal intrusion from said 
illegal intrusion detection unit; and 

when said event detection unit receives the detection of the illegal intrusion, said 
replication stopping unit instructs said storage control unit to stop data transfer from said 
storage volume to said replicated volume. 

8. (Canceled) 

9. (Original) A data protection apparatus according to Claim 7, wherein: 
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said computer system further comprises a computer virus detection unit for detecting a 
computer virus in said storage; 

said event detection unit receives the detection of the computer virus from said 
computer virus detection unit; and 

when said event detection unit receives the detection of the computer virus, said 
replication stopping unit instructs said storage control unit to stop data transfer from said 
storage volume to said replicated volume. 

10. (Previously Presented) A data protection method for protecting data in a storage volume 
in a computer system, with said computer system comprising said storage volume assigned 
for storing data, a computer for reading and writing data from and to said storage volume, a 
replicated volume assigned for storing data duplicated from said storage volume, and a 
storage control unit for controlling data transfer from said storage volume to said replicated 
volume, wherein said data protection method comprises steps of: 

detecting an intrusion into said computer; and 

instructing said storage control unit to stop data transfer from said storage volume to 
said replicated volume, when said intrusion is detected. 

1 1 . (Currently Amended) A program embodied on a storage medium that can be read by an 
information processing apparatus for making an - the information processing apparatus 
perform data protection of a storage volume in a computer system, with said computer system 
comprising said storage volume assigned for storing data, a computer for reading and writing 
data from and to said storage volume, a replicated volume assigned for storing data 
duplicated from said storage volume, and a storage control unit for controlling data transfer 
from said storage volume to said replicated volume, wherein said program makes said 
information processing apparatus perform processes of: 

detecting that an intrusion into the computer has occurred; and 
instructing said storage control unit to stop data transfer from said storage volume to 
said replicated volume, when said intrusion is detected. 
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12-13. Canceled. 

14. (Previously Presented) A computer system comprising a storage volume assigned for 
storing data, a replicated volume assigned for storing data duplicated from said storage 
volume, a storage control unit for controlling data transfer from said storage volume to said 
replicated volume, and a data protection apparatus for protecting data in said storage volume, 
wherein: 

said data protection apparatus comprises: 

an event detection unit for detecting an event occurrence; and 

a replication stopping unit for instructing said storage control unit to stop data transfer 
from said storage volume to said replicated volume, when said event detection unit detects an 
event; 

wherein said computer system further comprises an alteration detection unit that reads 
given data in said plurality of replicated volumes to detect respective differences between the 
given data; and 

the event detected by said event detection unit is a detection result of the differences 
between the given data, with said detection result being received from said alteration 
detection unit. 

15. (Original) A computer system according to Claim 14, wherein: 

write data to said storage volume is transferred by said storage control unit to said 
replicated volume with a delay of a given time. 

16. (Original) A computer system according to Claim 14, wherein: 

as said replicated volume, a plurality of replicated volumes are provided; and 
said storage control unit switches a transfer destination of write data of said storage 
volume, at given time intervals among said plurality of replicated volumes. 
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17. (Original) A computer system according to Claim 16, wherein: 

data transferred to said plurality of replicated volumes is further transferred to another 
plurality of replicated volumes. 

18. (Canceled) 

19. (Previously Presented) A computer system according to Claim 14, wherein: 

said computer system further comprises a computer for reading and writing data from 
and to said storage volume; 

said storage control unit further controls communication between said computer and 
said storage volume; and 

said data protection apparatus instructs said storage controller to stop communication 
between said computer and said storage when said event detection unit detects said event. 

20. Cancelled. 



5 



